Re: TOMOYO in linux-next

From: Pavel Machek
Date: Fri Mar 27 2009 - 07:39:52 EST


On Fri 2009-03-27 10:28:07, Bodo Eggert wrote:
> Pavel Machek <pavel@xxxxxx> wrote:
>
> > I don't think merging that is good idea. Security should be doable
> > without making shell-like glob matching...
>
> How do you suppose a security system should handle mozilla modifying
> ~/.bashrc differently from downloading something to ~/pr0n.jpg?

How does shell-like glob matching help there? You'd need to parse
/etc/passwd to find all ~ directories...

Pavel
--
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/